Strengthen Your Operational Resilience with PwC
The Gibraltar Financial Services (Operational Resilience) Regulations 2023 establish essential requirements for operational resilience, targeting specific firms in Gibraltar, including insurers, banks, investment firms, electronic-money issuers, payment service providers, and (re)insurance intermediaries with substantial intermediary business revenue.
Key Compliance Requirements:
- Self-Assessments: Firms must document self-assessments to demonstrate regulatory compliance, with the Board and senior management responsible for approving the identification of important business services, impact tolerances, and these self-assessments, ensuring robust governance.
- Communication Strategies: Developing strategies for communication with both internal and external stakeholders is necessary as part of operational disruption response planning.
- Outsourcing Accountability: Even when outsourcing to third parties, firms retain full accountability for meeting regulatory obligations.
Implementation Timelines:
- By 13 July 2024: Identify important business services and establish impact tolerances.
- By 13 July 2026: Develop a prioritised plan to maintain operations within impact tolerances.
- After 13 July 2026: Implement comprehensive strategies, processes, and systems to manage risks and maintain operations during severe disruptions.
We offer extensive expertise in operational resilience and regulatory development, providing comprehensive support to ensure your firm meets these regulatory requirements effectively:
- Desk-based Health Check and Readiness Assessment
- Proactive Assurance and Maturity Assessments
- Designing and Building Frameworks
- Project Management
- Secondments
- Regulatory Support
- Internal Audit
PwC's Track Record and Credentials
Presented oral evidence to the UK Treasury Select Committee on IT failures in 2019.
Frequently selected for Section 166 reviews by the UK PRA.
Conducted independent root cause analyses and post-incident reviews for major operational incidents.
Organised Operational Resilience Exchanges to share insights among firms.
Supported the UK PRA in developing Impact Tolerances in 2016.